VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.01 (nejvyšší)

Eclipse Foundation Eclipse Milo

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-62927, CVE-2026-63252, CVE-2026-58080, CVE-2026-63248, CVE-2026-60007, CVE-2026-61387, Summary: Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. Incorrect Authorization, Missing Release of Memory after Effective Lifetime,…

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první · zachyceno CZ · EN/orig

Eclipse Foundation výroba a průmysl energetika vodárenství FI US

tg: zranitelnost tp: identita tp: průmyslové systémy

CVE v události 6

CVEhodnoceníKEVEPSS
CVE-2026-58080 8.8 4.0 · eclipse – 0.00
CVE-2026-60007 9.1 4.0 · eclipse – 0.01
CVE-2026-61387 6.9 4.0 · eclipse – 0.01
CVE-2026-62927 8.7 4.0 · eclipse – 0.00
CVE-2026-63248 6.9 4.0 · eclipse – 0.00
CVE-2026-63252 8.7 4.0 · eclipse – 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.1.

Jak se o tom psalo 2

  1. · zachyceno · NCSC-FI FI nadpis události

    Eclipse Foundation Eclipse Milo

    Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-62927, CVE-2026-63252, CVE-2026-58080, CVE-2026-63248, CVE-2026-60007, CVE-2026-61387, Summary: Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. Incorrect Authorization, Missing Release of Memory after Effective Lifetime,…

  2. · zachyceno · CISA Advisories US

    Eclipse Foundation Eclipse Milo

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0|<=1.1.4 (CVE-2026-63252, CVE-2026-63248, CVE-2026-60007) Eclipse Milo >=1.0.0|<=1.1.4 (CVE-2026-62927, CVE-2026-58080, CVE-2026-61387) CVSS Vendor Equipment v3 8.2 Eclipse…